threatspire.com
Protocol Aware Detections: Practical Rules for Modbus, DNP3, IEC-104, and MMS — ThreatSpire Blog
Generic network detections miss the behaviors that actually matter on a control network. A small set of protocol aware rules per protocol will catch more real activity than a thousand IT signatures ev...